VMware Horizon Cloud Service | 8 DEC 2016
As of February 7, 2017, the new brand name for VMware Horizon Air is Horizon Cloud with Hosted Infrastructure. In the current releases, customers will continue to find legacy references to previous names in the product documentation.
Release notes last updated on 17 SEP 2018
Check for additions and updates to these release notes.
What's in the Release NotesThe release notes cover the following topics:
- New Documentation Page on VMware.com
- New Features
- New Capacity-Based Licensing Model
- Multi-Site Redirection
- File Shares for Importing Data
- Agent Software Update
- App Volumes Integration
- Instant Clone Integration
- New Notifications Page
- New Demo-Administrator Role
- LDAPS Protocol Phase Out
- VMware Identity Manager Integration
- Helpdesk Console (Beta Feature)
- Other Changes in this Release
- Product Support Notices
- Known Limitations
- Known Issues
New Documentation Page on VMware.com
There is now a documentation page on VMware.com, which serves as a portal to user documentation for all supported versions of this product. The URL of this page is https://docs.vmware.com/en/VMware-Horizon-Cloud-Service/index.html. Documentation will no longer be posted on the download site.
New Capacity-Based Licensing Model
Beginning with the 16.11 release, licensing is based on the purchase of units of standard desktop capacity. Each unit of standard capacity is defined by settings for memory, CPU, hard disk, and other attributes.
The Desktop Models page is now called Capacity, and includes the following information:
- Desktop Model - Shows the total standard capacity, with number of units used for each desktop model and units available.
Storage Types - Shows total storage, with amount used for different storage types and amount free. Click on the arrow icon below Storage GB to see the storage broken down by individual volumes.
For more information about capacity-based licensing, contact your VMware representative.
Multi-Site RedirectionIn environments that have a tenant spanning multiple data centers, the new multi-site redirection capability minimizes latency for users launching non-local desktops. When connecting to a remote desktop, the user will be redirected to the access point that is local to the resource being launched.
Note: There is a known issue with this feature. See Known Issues below for more information.
File Shares for Importing Data
You can now set up file shares on a separately-managed machine to import data into the user interface. This functionality supports several of the new features in this release:
- Agent Software Update uses a file share to import software updates so they can be applied to assignments.
- App Volumes Integration uses file shares to import AppStacks and make them available for assignments.
Note: There is a known issue with this feature. See Known Issues below for more information.
Agent Software Update
You can now update DaaS Agent and Horizon Agent software for dedicated desktop assignments directly in the user interface.
The system makes regular contact with the VMware CDS software distribution network and downloads agent updates automatically to a file share that you have set up on a local machine. The update files are then automatically imported into the system and made available to assignments.
The availability of updates is indicated on the Assignments page, where you can apply them to assignments. When you initiate the upgrade task on an assignment, all VMs in the assignment are updated as part of that task.
Your VMware representative can adjust the interval between scans for new agents and the wait time for scans after tenant startup if you request it.
- This functionality requires Horizon Agent 7.0.3
Agent software update is available for dedicated desktop assignments only.
You will need to configure this feature before you are able to use it. It is recommended that you do so as soon as possible after the 16.11 upgrade.
For more information for setting up and using the agent update feature, see Update Agent Software in the Assignments section of the Horizon Cloud with Hosted Infrastructure 16.11 Administration guide.
App Volumes Integration
You can now use the AppCapture component of VMware App Volumes to create AppStacks for provisioning applications to users. Once created, the AppStacks are placed in a file share and imported to be used in the creation of Application Assignments.Note the following:
- This feature must be enabled by your VMware representative before you can use it.
- App Volumes integration requires add-on storage to be purchased prior to activation.
Once App Volumes has been enabled on a tenant, it cannot be disabled.
For more information, see Import Applications Using App Volumes in the Applications section of the Horizon Cloud with Hosted Infrastructure 16.11 Administration guide.
Instant Clone Integration
Integration with VMware Instant Clone capability now significantly speeds up the provisioning of desktops for users.
- When you create a new image, you can choose to make it either of two types: Instant Clone or Traditional Clone. There is also a Type column on the Images page that identifies the type of each image listed. When you are selecting an image during the Assignment creation process, Image names include the acronym for the image type. For example, [IC] image1 is an Instant clone image and [TC] image 2 is a Traditional Clone image.
This feature is functional on all images and templates you receive from VMware. If you create an image from your own template, you must select the VMware Horizon Instant Clone Agent option when installing the Horizon Agent on the template VM for this feature to be enabled.
New Notifications Page
There is a new Notifications page (Monitor > Notifications) where you can view all current notifications in your system. For more information, see Notifications Page in the Monitoring section of the Horizon Cloud with Hosted Infrastructure 16.11 Administration guide.
New Demo-Administrator Role
Previously, the system had one default role for users, which was Super-Administrator. There are now two default roles, as described below.
- Super-Administrator - Users with this role have access to all functionality and can save changes.
Demo-Administrator - Users with this role have access to all functionality but cannot save any changes.
Note: There is a known issue with this feature. See Known Issues below for details.
LDAPS Protocol Phase Out
For improved security, LDAPS has been phased out as an Active Directory protocol. Beginning with this release, LDAP will be the only option when registering new AD domains, although LDAPS will continue to work with existing domains using that protocol.
Note: Along with this change, we are now supporting LDAP 389 with GSSAPI, which requires you to make a Microsoft Group Policy change. For more information, refer to the Microsoft requirements for LDAP signing bind accounts.
VMware Identity Manager Integration
Identity Manager, VMware's Identity as a Service (IDaaS) offering, can now be integrated with Horizon Cloud with Hosted Infrastructure.
The following versions of Identity Manager are supported:
Identity Manager Cloud
Identity Manager On-Premise 2.8
To set up Identity Manager integration:
- Install and configure Identity Manager as described in the Identity Manager documentation:
Identity Manager Cloud - See VMware Identity Manager Cloud Deployment.
Identity Manager On-Premise 2.8 - See Installing and Configuring VMware Identity Manager. This link is for version 2.8 only.
Enable Horizon Air in the VMware Identity Manager Administration Console:
In the VMware Identity Manager Administration Console, click the Catalog tab.
Select Application Catalog > Manage Desktop Applications > Horizon Air Application. You are redirected to the Horizon Air Resources page.
If Horizon Air Application menu item is not enabled yet in vIDM Hosted Service, access the connector link /desktoneresources/ directly in the browser. For example: https://sva-fcjindal.hs.trcint.com:8443/hc/t/SVA-FCJINDAL/3001/admin/desktoneresources/
Select Enable Horizon Air Desktops and Applications to configure Horizon Air for VMware Identity Manager and set up the sync schedule.
For descriptions of the fields and an example of configuration, see Enable Horizon Air Desktops and Apps in VMware Identity Manager.
If the tenant does not have a valid CA signed certificate installed, upload the tenant certificate in the vIDM Connector so that the sync can execute successfully:
Log in to the connector appliance admin page, https://vIDMconnectorhostname:8443/cfg/ssl, as the admin user.
Select Install Certificate.
Select the Terminate SSL on a Load Balancer tab.
Download the tenant certificate:
Open tenant host URL in Firefox browser.
Click on lock icon.
Export the certificate.
Paste the contents of the tenant certificate in the Root CA Certificate textbox under Tenant SSL on a Load Balancer.
Create the federation artifact in Identity Manager. See Create Federation Artifact for Horizon Air.
Set up the federation artifact, following the procedure described here: Configure SAML Authentication in the Horizon Air Tenant.
To download the VMware Identity Manager log files:
- Get the authorization for accessing the API’s with the URL:
https://<IP of appliance>/dt-rest/v100/system/login?user=<username>&domain=<tenant name>&pw=<password>
Call the API:
https://<IP of appliance>/dt-rest/v100//reporting/manager/ downloadvidmreport?numberofvidmreports=4
Note the following:
This API takes only one input, which is the most recent number files to download (4 in the example above). If the number is greater than number of available files to download, then all the available files should be returned.
Files are compressed (zipped) and passed on to the clients of this API.
The most recent file, to which logs are currently written, is also returned.
Helpdesk Console (Beta Feature)Notice Regarding Beta Features and Support
HELPDESK CONSOLE IS PROVIDED "AS IS", WITHOUT SLA OR WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
If you encounter questions or issues using the Helpdesk Console, you can send them to firstname.lastname@example.org. VMware is not committed to productization of any features or resolution of any issues of the Helpdesk Console.
The Helpdesk Console is a user interface that you can use to:
Access VMs directly.
Perform health scans.
Get remote assistance.
View usage trends and user session activity.
View logging information.
For feature descriptions and instructions, see the Horizon Cloud with Hosted Infrastructure 16.11 Administration guide.Top of Page
Other Changes in this Release
Applications Assignment Creation
When you create an applications assignment, you can no longer add individual users to it, only user groups. For more information, see the Assignments section of the Horizon Cloud with Hosted Infrastructure 16.11 Administration guide.
Product Support Notices
DaaS Agent 16.11 Required
DaaS Agent 16.11 is required for all Horizon Cloud with Hosted Infrastructure 16.11 installations.
Updating Images Using Console Access
Performing updates to images (such as updating agents) using console access without taking the image offline and then accessing it via the Helpdesk Console (beta feature) is not supported and can cause issues with the image and subsequent pools spun up using this image. Do not attempt to perform image updates this way. Always duplicate the image from the Admin Console and then update it using the HACA Console.
- In the French, Spanish, and Portuguese versions of the user interface, if you log in as the default admin user, create an image, and then attempt to create an RDSH assignment, the assignment is not created successfully.
Workaround: Create another admin account and use that account to create the image. (1680137)
If you create a session desktops assignment, and the image has been updated, then the assignment cannot be deleted until you push updates.
Workaround: Push updates before deleting. (1522987)
When you access the user interface with Microsoft Internet Explorer 11, groups with non-English names may not appear in Active Directory searches.
Workaround: Use only English names. (1717860/1727142)
Various browser issues are occurring with the Safari, Edge, or Internet Explorer 11 browsers.
Workaround: Use another browser, such as Firefox or Chrome, or another version of Internet Explorer and confirm if the issue persists. (1772683)
For users with Demo Administrator role, during assignment creation the Image field is not enabled unless the user first changes the value in the Desktop Model field above it. The Image field is also disabled during assignment editing, which prevents the user from advancing to the next screen of the wizard.
Workaround: None (1764962)
The AppStacks tab of the Storage Management page does not display a vertical scroll bar when you first access the page.
Workaround: Click the refresh icon on the page. (1765292)
When you add a file share on the Locations page, the Username and Password must contain only standard ASCII characters.
Workaround: Use only standard ASCII characters. (1764686)
When you edit Roles & Permissions from the Getting Started page, if you select Demo Administrator from the Role drop-down menu and click X next to the last remaining group, the Save button dims, preventing you from deleting the group.
Workaround: Edit Roles & Permissions by selecting Settings > Roles & Permissions. (1765091)
When you create an application assignment, the VMware Identity Manager (Workspace One) portal displays, in addition to the expected icons for the applications, an extra icon with the name of the assignment. This icon has no function and will not launch anything when it is selected.
Workaround: None (1698340)
When you have multiple domains registered, the Organizational Unit (OU) that you enter in the Image Defaults Configuration under General Settings is not applied to assignments for the domain as would be expected.
Workaround: Select the desired OU when you create each assignment, since this setting overrides the Image Defaults Configuration setting. (1771801)
The User Portal Timeout setting in General Settings is only being applied to the legacy Desktop Portal and not to the HTML Access Portal as expected.
Workaround: None (1771692)
Users are unable to connect via HTML Access client when using the Safari browser in iOS.
Workaround: Use the Horizon Native Client to launch over PCoIP or Blast. (1767197)
Users are not able to connect to their desktops after making changes in the Settings panel of the HTML Access portal launch page.
Workaround: Refresh the launch page, log in, and then make settings in the sidebar of the user interface. (1754451)
As a result of the previous issue, users are not able to manually set the time zone, since this setting is not available in the sidebar.
Workaround: None (1754451)
Users whose connections are being redirected by the new multi-site redirection functionality are experiencing intermittent problems when switching between devices (for example, a user logged in on a PC attempts to log in on an iOS device).
Workaround: None (1740839)
The URI for launching a desktop is not working as expected.
The normal URI is:
Workaround: Since this is not successfully launching the desktop, the workaround is to use the following:
When you export assignment information on the Assignments page, the generated Excel file is not showing Native Application assignment correctly. The Application Type is showing as 'Application Bundle' instead of 'Native', and the assignment count does not include Native Application assignments.
Workaround: None (1772380)
When creating an image, if you enter an image name different from the VM name (default value for image name), the name you select is not applied.
Workaround: Create the image and then change the name using the Rename function on the Images page. (1769435)
When Identity Manager On-Premise 2.7 is in use, users are unable to launch applications assigned to them. Desktops launch as expected.
Workaround: Upgrade to the On-Premise 2.8 version. (1735245)